Overview

overview

10

Static

static

3

9f93a58d3d...de.exe

windows7-x64

10

9f93a58d3d...de.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f93a58d3dc257f8529a228814bd78f008e5577567b13ae9268ff4ca94d7adde

  • Size

    78KB

  • Sample

    240604-a86q5sgc23

  • MD5

    8e380aaa624d1485e3c6c4b598fec408

  • SHA1

    3be3eb4b716930567c597d1fe6f8eb9003000222

  • SHA256

    9f93a58d3dc257f8529a228814bd78f008e5577567b13ae9268ff4ca94d7adde

  • SHA512

    9751dbe1646640b46f30c28e40a0d4e395f38bda492ad4cdc70b3f51fe4592a6bcb52370d23563a8de4e3aa598858e05ba5505f1519c73ce8a6f9c7d05a3c317

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoAX8YieVIJclPvPJtcdc1:ymb3NkkiQ3mdBjFo68YBVIJc9Jtx1

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      9f93a58d3dc257f8529a228814bd78f008e5577567b13ae9268ff4ca94d7adde

    • Size

      78KB

    • MD5

      8e380aaa624d1485e3c6c4b598fec408

    • SHA1

      3be3eb4b716930567c597d1fe6f8eb9003000222

    • SHA256

      9f93a58d3dc257f8529a228814bd78f008e5577567b13ae9268ff4ca94d7adde

    • SHA512

      9751dbe1646640b46f30c28e40a0d4e395f38bda492ad4cdc70b3f51fe4592a6bcb52370d23563a8de4e3aa598858e05ba5505f1519c73ce8a6f9c7d05a3c317

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDoAX8YieVIJclPvPJtcdc1:ymb3NkkiQ3mdBjFo68YBVIJc9Jtx1

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks